Lucene search
+L

9 matches found

EUVD
EUVD
•added 2025/10/07 12:30 a.m.•15 views

EUVD-2021-16346

Malware in sbrugna...

5.4CVSS5.5AI score0.00771EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2024/07/04 12:48 p.m.•18 views

Security Bulletin: Vulnerability affect IBM Business Automation Workflow - CVE-2024-37528

Summary IBM Business Automation Workflow Center is vulnerable to a Cross.Site Scripting attack. Vulnerability Details CVEID:CVE-2024-37528 DESCRIPTION: IBM CP4BA - Business Automation Studio Component is vulnerable to cross-site scripting. This vulnerability allows a privileged user to embed...

5.4CVSS5.3AI score0.00259EPSS
SaveExploits0Affected Software2
CNVD
CNVD
•added 2022/01/21 12:00 a.m.•43 views

IBM Cloud Pak for Automation Input Validation Error Vulnerability

IBM Cloud Pak for Automation is an intelligent software platform for building automation applications in cloud environments from IBM USA. The platform uses pre-integrated automation technologies and low-code tools to design, build and run automation applications and services on any cloud. A...

5.4CVSS5.4AI score0.00771EPSS
SaveExploits0References1
OSV
OSV
•added 2022/01/18 5:15 p.m.•16 views

CVE-2021-29872

IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP...

5.4CVSS6AI score0.00771EPSS
SaveExploits0References2
NVD
NVD
•added 2022/01/18 5:15 p.m.•20 views

CVE-2021-29872

IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP...

5.4CVSS0.00771EPSS
SaveExploits0References2
Prion
Prion
•added 2022/01/18 5:15 p.m.•27 views

Cross site scripting

IBM Cloud Pak for Automation 21.0.1 and 21.0.2 - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of input by the HOST headers. By sending a specially crafted HTTP request, a remote attacker could exploit this vulnerability to inject HTTP...

3.5CVSS5.4AI score0.00771EPSS
SaveExploits0References2Affected Software1
CVE
CVE
•added 2022/01/18 4:50 p.m.•61 views

CVE-2021-29872

IBM Cloud Pak for Automation 21.0.1 and 21.0.2 – Business Automation Studio component is vulnerable to HTTP header injection due to improper HOST header validation. A remote attacker can craft requests to inject the HOST header, enabling attacks such as cross-site scripting, cache poisoning, or s...

5.4CVSS5.4AI score0.00771EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
•added 2022/01/18 12:00 a.m.•16 views

IBM Cloud Pak for Automation 安全漏洞

IBM Cloud Pak for Automation is an intelligent software platform for building automation applications in cloud environments from IBM USA. The platform uses pre-integrated automation technologies and low-code tools to design, build and run automation applications and services on any cloud. A...

5.4CVSS5.5AI score0.00771EPSS
SaveExploits0References3
IBM Security Bulletins
IBM Security Bulletins
•added 2022/01/17 4:28 p.m.•24 views

Security Bulletin: Host header injection vulnerability in Business Automation Studio in Cloud Pak for Automation (CVE-2021-29872)

Summary Business Automation Studio in IBM Cloud Pak for Automation is vulnerable to a host header injection attack. Vulnerability Details CVEID: CVE-2021-29872 DESCRIPTION: IBM ICP4A - Business Automation Studio Component is vulnerable to HTTP header injection, caused by improper validation of...

5.4CVSS5.6AI score0.00771EPSS
SaveExploits0Affected Software1
Rows per page
Query Builder